ucloud/ucloud-sdk-php
The repository includes tests, build tooling, and security scanning. The license mismatch and unpinned workflow actions merit verification before upgrading, but recent activity and organizational backing support continued maintenance.
78%
Total Score
100
88
67
Health Score Breakdown
The artifact declares MIT but its license file is detected as Apache-2.0, creating a licensing inconsistency despite a license file being present in both the artifact and repository.
No repository security policy was found, leaving vulnerability-reporting expectations and response procedures undocumented.
Version 0.3.55 is not a prerelease and has no recent prerelease share, although it remains below a stable major version and may carry API-evolution risk.
The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or injection findings. However, all seven referenced actions are unpinned, weakening build reproducibility and update integrity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 ucloud |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.1 || ^v3.0 | — | — |
guzzlehttp/guzzle Version ^6.2.1|^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 days ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.